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prime number. A first subnumber (d M sub M p) and a second subnumber (d M sub"q) are calculated for the second number 
(d) as the multiplicative inverse of the first number (e) with respect to a second submodule (120), the first 
submodule and the second submodule being relatively prime. Finally, the second number (d) is determined using the 
first subnumber (d M sub M p) and the second subnumber (d"sub"q) and applying the Chinese remainder theorem (130). 

French Abstract: 

L'invention concerne un procede pour determiner une paire de nombres comprenant un premier et un deuxieme 
nombre, le premier nombre pouvant etre une premiere cle et le deuxieme nombre une deuxieme cle d'un systeme de 
codage, et le deuxieme nombre etant l'inverse multiplicatif d'un module du premier nombre, ce module etant egal au 
produit d'un premier nombre premier et d'un deuxieme nombre premier. Selon ce procede, on commence par 
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nombre (d) comme inverse multiplicatif du premier nombre (e) par rapport a un premier sous-module egal au 
premier nombre premier moins 1 divise par le plus grand denominateur commun (ggT) du premier nombre premier 
moins 1 et du deuxieme nombre premier moins 1. On calcule (120) ensuite un deuxieme sous-nombre (d"sub"q) 
pour le deuxieme nombre (d) comme inverse multiplicatif du premier nombre (e) par rapport a un deuxieme 
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relativement premiers. Pour finir, le deuxieme nombre (d) est determine (130) a l'aide du premier sous-nombre 
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The invention relates to a code exchange protocol in which communication partners (A, B) each have a secret code 
(S) and a public code (P). According to the invention, communication partner (A) selects a random number (x), and 
communication partner (B) selects a random number (y). A first partial code (Ax) is formed by communication 
partner (A), and a second partial code (By) is formed by communication partner (B) by using the public code (P) of 
the respective partner (B, A). Each partial code is transmitted to the other communication partner (B, A). A session 
code (gxy, gyx) is formed from each of the personal random numbers (x, y) and from the partial code (By, Ax) of the 
respective communication partner (B, A) by using the personal secret code (S), whereby the partial codes (Ax, By), 
and the session codes (gxy, gyx) can be calculated in a manner which is analogous to the DifFie-Hellman protocol. 



French Abstract: 



^invention concerne un protocole d'echange de codes dans lequel des correspondants (A, B) possedent 
respectivement un code secret (S) et un code public (P), le correspondant (A) composant un nombre aleatoire (x) et 
le correspondant (B) composant un nombre aleatoire (y). Un premier code partiel (Ax) est forme par le 
correspondant (A), et un deuxieme code partiel (By) est forme par le correspondant (B) a 1'aide du code public (P) 
du correspondant respectif (B, A), ce premier code et ce deuxieme code etant transmis respectivement a Tautre 
correspondant (B, A). Un code de session (gxy, gyx) est forme respectivement a partir du nombre aleatoire 
personnel (x, y) et du code partiel (By, Ax) du correspondant respectif (B, A), a l'aide du code secret (S) personnel, 
le code partiel (Ax, By) et le code de session (gxy, gyx) etant calcules par analogie avec le protocole de 
Diffie-Hellman. 
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DESCRIPTION - Also included are INDEPENDENT CLAIMS for the following: 



A. a security module with virtual memory addressing; 

B. a device for production of a security module with virtual memory addressing; 
C a method for configuring a security module with a virtual memory address 

USE - The method is used for production of a security module with virtual memory addressing. 
ADVANTAGE - The stored information is stored in different physical addresses at 2 different points in time for 
increasing the protection of the security module from attack. 

DESCRIPTION OF DRAWINGS - The figure shows a flow diagram for production of a security module with 
virtual memory addressing. (Drawing includes non-English language text). 
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Abstract: While quantum computers might speed up in principle certain computations dramatically, in practice, 
though quantum computing technology is still in its infancy. Even we cannot clearly envision at present what the 
hardware of that machine will be like. Nevertheless, we can be quite confident that it will be much easier to build 
any practical quantum computer operating on a few number of quantum bits rather than one operating on a huge 
number of quantum bits. It is therefore of big practical impact to use the resource of quantum bits very sparingly, ie, 
to find quantum algorithms which use as few as possible quantum bits. Here, we present a method to reduce the 
number of actually needed qubits in Shor's algorithm to factor a composite number N. Exploiting the inherent 
probabilism of quantum computation we are able to substitute the continued fraction algorithm to find a certain 
unknown fraction by a simultaneous Diophantine approximation. While the continued fraction algorithm is able to 
find a Diophantine approximation to a single known fraction with a denominator greater than N/sup 2/, our 
simultaneous Diophantine approximation method computes in polynomial time unusually good approximations to 
known fractions with a denominator of size N/sup 1+ epsilon /, where epsilon is allowed to be an arbitrarily small 
positive constant. As these unusually good approximations are almost unique we are able to recover an unknown 
denominator using fewer qubits in the quantum part of our algorithm. ( 26 Refs) 
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Abstract: Wiener (1990) has shown that when the RSA protocol is used with a decrypting exponent, d, which is less 
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In this article we will, be concerned with a polynomial-time attack 
against the ECDSA, which computes the secret key of the ECDSA 
if a few bits of the ephemeral-key from several ECDSA-signatures are known. 
The number of needed bits per signature is 12, if one has access to an 
ideal lattice basis reduction algorithm computing the n SUP t SUP h 
successive minimum of a lattice with rank n. The aforesaid bits of the 
ephemeral-key can be obtained from insecure ECDSA implementations by so 
called side-channel-attacks like Timing, Simple-Power-Analysis, 
Differential-Power-Analysis, Electromagnetic or Differential-Fault attacks. 
Our attack combines a recent idea of Howgrave -Graham and Smart with an old 
lattice attack against linear congruential pseudo-random number generators 
due to Frieze, Hastad, Kannan, Lagarias und Shamir. In contrast to 
Howgrave-Graham and Smart, our approach enables the exact determination of 
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